Static task
static1
Behavioral task
behavioral1
Sample
NEAS.cbf5d954c2bc697f59ab684c8f323740.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.cbf5d954c2bc697f59ab684c8f323740.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.cbf5d954c2bc697f59ab684c8f323740.exe
-
Size
14KB
-
MD5
cbf5d954c2bc697f59ab684c8f323740
-
SHA1
473403895c8ff0dc8ae09c283c103ceaf151c9fb
-
SHA256
9f93bbb31225c1d897e7d30a1a9284993786d86ec73ecc2778a560401874d30e
-
SHA512
6a533ec580537f491a6834564ea68812ffa4d9e8a827c6883bdc8b71ba053d6781d6c5e754aa7fc08a00389ec2e6bf7bc35fe3703747f71d961ac1791d11e5fc
-
SSDEEP
192:THZT+KwkrHPageDpRYrJVTqkkkkkes6s6s6s6s6s6s6s6sC+Pn9HuJHqqDE045HQ:THlDBHCDMTVXXXXXXXXhYtDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.cbf5d954c2bc697f59ab684c8f323740.exe
Files
-
NEAS.cbf5d954c2bc697f59ab684c8f323740.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ